Overview

overview

7

Static

static

3

ab523e24d2...62.exe

windows10-2004-x64

7

ab523e24d2...62.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    08/05/2026, 12:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ab523e24d2b4e0eb6b53c33ab5e665b7600739754fcc1fddf354f60e37274262.exe
  • Size 10.2MB
  • Sample260508-pvpysshs71
  • SHA256 ab523e24d2b4e0eb6b53c33ab5e665b7600739754fcc1fddf354f60e37274262
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 17 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ab523e24d2b4e0eb6b53c33ab5e665b7600739754fcc1fddf354f60e37274262.exe
    "C:\Users\Admin\AppData\Local\Temp\ab523e24d2b4e0eb6b53c33ab5e665b7600739754fcc1fddf354f60e37274262.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Users\Admin\AppData\Local\Temp\ab523e24d2b4e0eb6b53c33ab5e665b7600739754fcc1fddf354f60e37274262.exe
      "C:\Users\Admin\AppData\Local\Temp\ab523e24d2b4e0eb6b53c33ab5e665b7600739754fcc1fddf354f60e37274262.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:2024
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:5252

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\VCRUNTIME140.dll
          • Size 95KB
          • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _asyncio.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_asyncio.pyd
          • Size 63KB
          • SHA256 a9a99a2b847e46c0efce7fcfefd27f4bce58baf9207277c17bffd09ef4d274e5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_bz2.pyd
          • Size 81KB
          • SHA256 62173a8fadd4bf4dd71ab89ea718754aa31620244372f0c5bbbae102e641a60e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_ctypes.pyd
          • Size 120KB
          • SHA256 1ea3dd3df393fa9b27bf6595be4ac859064cd8ef9908a12378a6021bba1cb177
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _decimal.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_decimal.pyd
          • Size 248KB
          • SHA256 9aac010a424c757c434c460c3c0a6515d7720966ab64bad667539282a17b4133
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_hashlib.pyd
          • Size 63KB
          • SHA256 caa4d2f8795e9a55e128409cc016e2cc5c694cb026d7058fc561e4dd131ed1c9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_lzma.pyd
          • Size 154KB
          • SHA256 60793c8592193cfbd00fd3e5263be4315d650ba4f9e4fda9c45a10642fd998be
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _multiprocessing.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_multiprocessing.pyd
          • Size 33KB
          • SHA256 7581edea33c1db0a49b8361e51e6291688601640e57d75909fb2007b2104fa4c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _overlapped.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_overlapped.pyd
          • Size 48KB
          • SHA256 2ebbb0583259528a5178dd37439a64affcb1ab28cf323c6dc36a8c30362aa992
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _queue.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_queue.pyd
          • Size 30KB
          • SHA256 925f05255f4aae0997dc4ec94d900fd15950fd840685d5b8aa755427c7422b14
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_socket.pyd
          • Size 77KB
          • SHA256 e6deb751039cd5424a139708475ce83f9c042d43e650765a716cb4a924b07e4f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_ssl.pyd
          • Size 156KB
          • SHA256 d2a7999e234e33828888ad455baa6ab101d90323579abc1095b8c42f0f723b6f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          auto.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tcl_data\auto.tcl
          • Size 21KB
          • SHA256 517204ee436d08efc287abc97433c3bffcaf42ec6592a3009b9fd3b985ad772c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cp1252.enc
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tcl_data\encoding\cp1252.enc
          • Size 1KB
          • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          pkgIndex.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tcl_data\http1.0\pkgIndex.tcl
          • Size 746B
          • SHA256 77265723959c092897c2449c5b7768ca72d0efcd8c505bddbb7a84f6aa401339
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          init.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tcl_data\init.tcl
          • Size 25KB
          • SHA256 331bcf0f9f635bd57c3384f2237260d074708b0975c700cfcbdb285f5f59ab1f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pkgIndex.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tcl_data\opt0.4\pkgIndex.tcl
          • Size 620B
          • SHA256 6a4abd2c519a745325c26fb23be7bbf95252d653a24806eb37fd4aa6a6479afe
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          package.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tcl_data\package.tcl
          • Size 23KB
          • SHA256 f46ab61cdebe3aa45fa7e61a48930d64a0d0e7e94d04d6bf244f48c36cafe948
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tclIndex
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tcl_data\tclIndex
          • Size 5KB
          • SHA256 ddf7e42def37888ad0a564aa4f8ca95f4eec942cebebfca851d35515104d5c89
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tm.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tcl_data\tm.tcl
          • Size 11KB
          • SHA256 4b7ed9fd2363d6876092db3f720cbddf97e72b86b519403539ba96e1c815ed8f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          button.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\button.tcl
          • Size 21KB
          • SHA256 1f5dd8d81b26f16e772e92fd2a22accb785004d0ed3447e54f87005d9c6a07a5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          entry.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\entry.tcl
          • Size 17KB
          • SHA256 af1de90270693273b52fc735da6b5cd5ca794f5afd4cf03ffd95147161098048
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icons.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\icons.tcl
          • Size 10KB
          • SHA256 1264940e62b9a37967925418e9d0dc0befd369e8c181b9bab3d1607e3cc14b85
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          listbox.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\listbox.tcl
          • Size 14KB
          • SHA256 47c75f9f8348bf8f2c086c57b97b73741218100ca38d10b8abdf2051c95b9801
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          menu.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\menu.tcl
          • Size 38KB
          • SHA256 d1283f67e435aab0bdbe9fdaa540a162043f8d652c02fe79f3843a451f123d89
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          panedwindow.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\panedwindow.tcl
          • Size 5KB
          • SHA256 aa4f87e41ac8297f51150f2a9f787607690d01793456b93f0939c54d394731f9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pkgIndex.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\pkgIndex.tcl
          • Size 376B
          • SHA256 3f2539e85e2a9017913e61fe2600b499315e1a6f249a4ff90e0b530a1eeb8898
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          scale.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\scale.tcl
          • Size 7KB
          • SHA256 0da2dc955ffd71062a21c3b747d9d59d66a5b09a907b9ed220be1b2342205a05
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          scrlbar.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\scrlbar.tcl
          • Size 12KB
          • SHA256 eec90404f702d3cfbfaec0f13bf5ed1ebeb736bee12d7e69770181a25401c61f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          spinbox.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\spinbox.tcl
          • Size 16KB
          • SHA256 2ff791a44406dc8339c7da6116e6ec92289bee5fc1367d378f48094f4abea277
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          text.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\text.tcl
          • Size 34KB
          • SHA256 4a42ad370e0cd93d4133b49788c0b0e1c7cd78383e88bacb51cb751e8bfda15e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tk.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tk_data\tk.tcl
          • Size 23KB
          • SHA256 0f617d96cbf213296d7a5f7fcffbb4ae1149840d7d045211ef932e8dd66683e9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _tkinter.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_tkinter.pyd
          • Size 64KB
          • SHA256 06b96357f5dd83d0d8105127e7aaeacb834ddf1ae03fa46aaffdc1e5fd0a7621
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _uuid.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\_uuid.pyd
          • Size 24KB
          • SHA256 990586f2a2ba00d48b59bdd03d3c223b8e9fb7d7fab6d414bac2833eb1241ca2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\base_library.zip
          • Size 859KB
          • SHA256 d162d475df1f91355d9a2fa2f87a838385f1190fe1117cfe8a7da1dba2e629f8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          blue.json
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\customtkinter\assets\themes\blue.json
          • Size 4KB
          • SHA256 c9417470c16ced7a43d6c4a8e027afa6edc62c24d5aee7c4c2dcd11385964d3b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          dark-blue.json
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\customtkinter\assets\themes\dark-blue.json
          • Size 4KB
          • SHA256 6a57fa6f8fb8961a30ce6429522b180d76e3af9b8e0daac259059841386a6bd3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libcrypto-1_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\libcrypto-1_1.dll
          • Size 3.3MB
          • SHA256 9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libffi-7.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\libffi-7.dll
          • Size 32KB
          • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssl-1_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\libssl-1_1.dll
          • Size 688KB
          • SHA256 d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pyexpat.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\pyexpat.pyd
          • Size 194KB
          • SHA256 4a2d59993bce76790c6d923af81bf404f8e2cb73552e320113663b14cf78748c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python310.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\python310.dll
          • Size 4.3MB
          • SHA256 14b06796f288bc6599e458fb23a944ab0c843e9868058f02a91d4606533505ed
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\select.pyd
          • Size 29KB
          • SHA256 db85f2f94d4994283e1055057372594538ae11020389d966e45607413851d9e9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tcl86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\tcl86t.dll
          • Size 1.8MB
          • SHA256 fbfd065f861ec0a90dd513bc209c56bbc23c54d2839964a0ec2df95848af7860
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msgcat-1.6.1.tm
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\tcl8\8.5\msgcat-1.6.1.tm
          • Size 34KB
          • SHA256 6774519f179872ec5292523f2788b77b2b839e15665037e097a0d4edddd1c6fb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tk86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\tk86t.dll
          • Size 1.5MB
          • SHA256 cd2f60075064dfc2e65c88b239a970cb4bd07cb3eec7cc26fb1bf978d4356b08
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24122\unicodedata.pyd
          • Size 1.1MB
          • SHA256 1fb2d66c056f69e8bbdd8c6c910e72697874dae680264f8fb4b4df19af98aa2e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/2024-1020-0x0000029DAAFD0000-0x0000029DAAFDC000-memory.dmp
          Download